Back to search
CVE-2017-11624
Published: Jul 25, 2017
Modified: Aug 5, 2024
PUBLISHED
Description
A stack-consumption vulnerability was found in libqpdf in QPDF 6.0.0, which allows attackers to cause a denial of service via a crafted file, related to the QPDFTokenizer::resolveLiteral function in QPDFTokenizer.cc after two consecutive calls to QPDFObjectHandle::parseInternal, aka an "infinite loop."
| Vendor | Product | Versions |
|---|---|---|
n/a | n/a | affected n/a |
References
USN-3638-1
vendor-advisory
x_refsource_UBUNTU
https://github.com/qpdf/qpdf/issues/117
x_refsource_MISC
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now